AMENDMENTS TO THE CLAIMS: 

This listing of the claims will replace all prior versions, and listings, of the claims in this 
application. 

Listing of Claims; 

1-20. Cancelled 

2 1 . (Currently Amended) A method for operating to operate a storage area network (SAN) in a 
server environment in which multiple operating system images share one Fibre Channel adapter, 
the method comprising t he steps of : 

managing the SAN by a SAN Management software with at least a SAN Management 
server and at least a SAN Management client with a communication path to said Fibre Channel 
Adapter, 

separating the requests issued by the SAN Management server into at least two groups, 
a first group is processed by the Fibre Channel adapter and the SAN on behalf of the SM 

Management client in place of ottrcr operating sys t ems system images which share the same 

adapter Fibre Channel Adapter , corresponding to a trusted path, and 

a second group is processed by the o ther operating systems system images without the 

need to send or receive requests to or from the F€ Fibre Channel adapter and the S AN. 

22. (Currently Amended) The method according to claim 21, further comprising t lie step of : 

routing all information contained in imsolicited messages generated in the SAN and FG 
Fibre Channel adapter to the SAN Manager Management server by the SAN management client. 

23. (Currently Amended) The method according to claim 21 or 22 , further comprising t lic step 
of: 

using t he IIDA An Host Bus Adapter Application Program Interface binding requests 
to modify the a firewall , and operating the communication path from the SAN Management 
client to the Fibre Channel adapter so that it cannot be modified or eavesdropped bv an o ther an 
operating system image . 
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24. Cancelled 



25. (Cxirrently Amended) The method according to one o f the claims 21 to 24 claim 2 L further 
comprising t he steps of : 

accessing all information relevant for billing individual operating system images 
generated in the ¥G Fibre Channel adapter and SAN only through the SAN Management client 
on the tmsted path. 

26. (Currently Amended) The method according to one of tlic claims 21 to 25 claim 21 , further 
comprising t h e s te p of : 

said SM SAN Management server providing authorization data to the SM SAN 
Management client to execute requests from said first group , and said SAN Management server 
and SAN Management client providing authorization data to the OS images to execute requests 
from said second group, and operating the OS images so that thev are onlv enabled to execute 
a limited command set in the SAN . 

27. Cancelled 

28. Cancelled 

29. (Currently Amended) A computer program product stored on a computer usable medium, 
comprising computer readable program means for causing a computer to pcif o rm a nictlioJ 
acc o rding to anyone of tlie preceding claims 21 t o 28 . where the computer readable program 
when executed on a computer causes the computer to operate a storage area network fSAN^ in 
an environment in which multiple operating svstem images f OS images) share one Fibre Channel 
adapter by operations of: 

managing the SAN with at least a SAN Management server and at least a SAN 
Management client with a communication path to said Fibre Channel Adapter. 

separating requests issued bv the SAN Management server into at least two groups. 

where a first group of requests is processed bv the Fibre Channel adapter and the SAN 
on behalf of the SM Management client in place of operating svstem images which share the 
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same Fibre Channel Adapter, corresponding to a trusted path, and 

a second group of requests is processed by the operating system images without the need 
to send or receive requests to or from the Fibre Channel adapter and the SAN . 

30. (New) The computer program product as in claim 29, further comprising an operation of: 

routing information contained in unsolicited messages generated in at least one of the 
SAN and Fibre Channel adapter to the SAN Management server by the SAN management client. 

31. (New) The computer program product as in claim 29, further comprising an operation of: 

using Host Bus Adapter_Application Program Interface binding requests to modify a 
firewall interposed between said OS images and said Fibre Channel adapter. 

32. (New) The computer program product as in claim 29, further comprising an operation of: 

operating the commimication path from the SAN Management client to the Fibre Channel 
adapter so that it cannot be accessed by an operating system image. 

33. (New) The computer program product as in claim 29, further comprising an operation of: 

accessing information relevant for billing individual operating system images generated 
in the Fibre Channel adapter and SAN only through the SAN Management client on the trusted 
path. 

34. (New) The computer program product as in claim 29, further comprising an operation of: 

providing authorization data from the SAN Management server to the SAN Management 
client to execute requests from said first group of requests. 

35. (New) The computer program product as in claim 29, further comprising an operation of: 

providing authorization data from the SAN Management server and the SAN 
Management client to the OS images to execute requests from said second group of requests. 

36. (New) The computer program product as in claim 29, further comprising an operation of 
enabling the OS images to execute a limited command set in the SAN, 
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37. (New) The computer program product as in claim 29, wherein the SAN Management server 
is equipped with a SAN Management Client and a Remote Access Server (RA Server), further 
comprising an operation of maintaining authorization data for accessing the RA Server in at least 
one of the SAN Management server and the SAN Management Client. 

38. (New) The computer program product as in claim 37, further comprising an operation of 
operating the SAN Management Client as a router for requests from the SAN Management server 
to the RA server. 

39. (New) The computer program product as in claim 37, wherein the RA Server comprises a 
telnet/sshd server. 

40. (New) A storage area network (SAN) Management server, comprising: 

a first interface to couple to a SAN Management client that comprises a trusted operating system 
(OS), said SAN Management client being coupled to a SAN via a SAN adapter; and 

a second interface to couple to at least one imtrusted operating system, said at least one untrusted 
OS being coupled to the SAN via the SAN adapter and via a unit for regulating access to the 
SAN; 

where said SAN Management server comprises logic for distinguishing a first set of requests 
firom a second set of requests, where the first set of requests are processed in cooperation only 
with said SAN Management client, and where the second set of requests are processed at least 
in part by the at least one imtrusted operating system. 

41 . (New) The SAN Management server as in claim 40, where said first set of requests comprise 
at least one of a SAN request and a SAN adapter request, and said second set of requests 
comprise a request for untrusted OS configuration data. 

42. (New) A storage Eirea network (SAN) Management client, comprising: 
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a trusted operating system (OS); 

a first interface to couple to a SAN via a SAN adapter; and 

a second interface to couple to a SAN Management server and to at least one untrusted operating 
system coupled to the SAN via the SAN adapter and via a controller for regulating access to said 
SAN; 

said SAN Management client comprising logic for processing a first set of requests identified by 
the SAN Management server in cooperation only with said SAN Management server, where a 
second set of requests identified by the SAN Management server are processed at least in part 
by the at least one untrusted OS; 

where said first set of requests comprise at least one of a SAN request and a SAN adapter 
request, where said second set of requests comprise a request for untrusted OS configuration data. 

43. (New) The SAN Management client as in claim 42, where the controller operates on top of 
said trusted operating system of said SAN Management client. 
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